# Huawei Versatile Routing Platform Software
# VRP (R) software, Version 5.170 (S5735 V200R019C10SPC500)
# Copyright (C) 2000-2020 HUAWEI TECH Co., Ltd.
# 
# DDR             Memory Size : 1024  M bytes
# FLASH Total     Memory Size : 512   M bytes
# FLASH Available Memory Size : 306   M bytes
# Pcb           Version   : VER.B
# BootROM(1st)       Version   : 0000.0121
# BootROM(2nd)       Version   : 0000.0200
# BootLoad      Version   : 0213.0000
# CPLD          Version   : 0105 
# Software      Version   : VRP (R) Software, Version 5.170 (V200R019C10SPC500)
# FLASH         Version   : 0000.0000
# S5735-L48T4X-A's Device status:
# Slot Sub  Type                   Online    Power    Register     Status   Role  
# --------------------------------------------------------------------------------------
# 0    -    S5735-L48T4X-A         Present   PowerOn  Registered   Normal   Master
!Software Version V200R019C10SPC500
#
sysname TY2-H05-TOR-S5735-B-42U
#
vlan batch 27 to 30
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name dot1xmac_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name multi_authen_profile
authentication-profile name portal_authen_profile
#
clock timezone UTC add 00:00:00
#
diffserv domain default
#
radius-server template default
#
hwtacacs-server template peg
 hwtacacs-server authentication 104.233.160.2
 hwtacacs-server authorization 104.233.160.2
 hwtacacs-server accounting 104.233.160.2
 hwtacacs-server shared-key cipher %^%#s,j3!S&`Q9QJx<Z4Lf'&bRYz~l3y-PLtvbOj[mC6%^%#
#
pki realm default
 certificate-check none
#
acl name acl4snmp 2999
 rule 5 permit source 104.233.160.0 0.0.0.15
 rule 10 permit source 10.0.19.0 0.0.0.255
 rule 15 permit source 137.175.10.64 0.0.0.31
 rule 20 permit source 199.180.101.101 0
#
acl name acl4outintGigabitEthernet0/0/14 3966
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/14 3967
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.233.168.1 0
 rule 300 permit ip source 104.233.168.2 0
 rule 305 permit ip source 104.233.168.3 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/23 3970
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/23 3971
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.233.172.119 0
 rule 300 permit ip source 104.233.172.120 0
 rule 305 permit ip source 104.233.172.121 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/22 3972
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/22 3973
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.233.172.84 0
 rule 300 permit ip source 104.233.172.85 0
 rule 305 permit ip source 104.233.172.118 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/21 3974
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/21 3975
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.233.175.130 0
 rule 300 permit ip source 104.233.172.82 0
 rule 305 permit ip source 104.233.172.83 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/13 3988
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/13 3989
 rule 1 deny ip source 10.0.0.0 0.255.255.255
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 38.63.68.64 0.0.0.31
 rule 605 permit ip source 38.63.69.96 0.0.0.31
 rule 610 permit ip source 38.63.64.224 0.0.0.31
 rule 615 permit ip source 38.63.88.224 0.0.0.31
 rule 620 permit ip source 38.63.80.96 0.0.0.31
 rule 625 permit ip source 38.63.83.96 0.0.0.31
 rule 630 permit ip source 38.63.76.160 0.0.0.31
 rule 635 permit ip source 38.63.89.160 0.0.0.31
 rule 640 permit ip source 107.149.254.208 0.0.0.7
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/8 3990
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/8 3991
 rule 1 deny ip source 10.0.0.0 0.255.255.255
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.168.29 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/20 3992
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/20 3993
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.233.166.129 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/19 3994
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/19 3995
 rule 1 deny ip source 10.0.0.0 0.255.255.255
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 107.148.60.48 0.0.0.7
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/24 3996
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/24 3997
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.233.161.77 0
 rule 300 permit ip source 104.233.161.78 0
 rule 305 permit ip source 104.233.161.79 0
 rule 310 permit ip source 104.233.161.80 0
 rule 315 permit ip source 104.233.161.82 0
 rule 320 permit ip source 38.173.75.192 0.0.0.63
 rule 325 permit ip source 38.173.82.64 0.0.0.63
 rule 330 permit ip source 107.148.124.0 0.0.0.63
 rule 335 permit ip source 107.148.126.0 0.0.0.63
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/1 3998
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/1 3999
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.165.29 0
 rule 605 permit ip source 104.233.164.162 0
 rule 610 permit ip source 104.233.164.163 0
 rule 615 permit ip source 104.233.164.164 0
 rule 620 permit ip source 104.233.165.112 0.0.0.15
 rule 625 permit ip source 104.233.165.104 0.0.0.7
 rule 900 deny ip
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
aaa
 authentication-scheme default
  authentication-mode local
 authentication-scheme peg
  authentication-mode hwtacacs local
 authentication-scheme radius
  authentication-mode radius
 authorization-scheme default
  authorization-mode local
 authorization-scheme peg
  authorization-mode hwtacacs local
 accounting-scheme default
  accounting-mode none
 accounting-scheme peg
  accounting-mode hwtacacs
 recording-scheme peg
  recording-mode hwtacacs peg
 cmd recording-scheme peg
 local-aaa-user password policy administrator 
  password history record number 0
  password expire 0
 domain default
  authentication-scheme radius
  accounting-scheme default
  radius-server default
 domain default_admin
  authentication-scheme peg
  accounting-scheme peg
  authorization-scheme peg
  hwtacacs-server peg
 local-user admin password irreversible-cipher $1c$z"LSX]#OR7$>0A@A|`)PJwCCEPMm[WF~iP%*:^xM#"dYh8a6v&*$
 local-user admin privilege level 15
 local-user admin service-type terminal http
#
ntp-service server disable
ntp-service ipv6 server disable
ntp-service unicast-server 104.233.160.2
#
interface Vlanif1
#
interface MEth0/0/1
 ip address 10.0.19.115 255.255.255.0
#
*interface MEth0/0/2
#
interface Eth-Trunk15
 description TKY1-03A-X16-BAS-N3064-B-lag15
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 27 to 30
 mode lacp
#
interface GigabitEthernet0/0/1
 auto speed 100
 port link-type access
 port default vlan 29
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/1
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/1
 port-isolate enable group 1
 qos lr outbound cir 20000 cbs 65535
 qos lr inbound cir 20000 cbs 65535
#
interface GigabitEthernet0/0/2
 shutdown
 port link-type access
 port default vlan 29
 port-isolate enable group 1
#
interface GigabitEthernet0/0/3
 shutdown
 port link-type access
 port default vlan 30
#
interface GigabitEthernet0/0/4
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/5
 shutdown
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/8
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/8
#
interface GigabitEthernet0/0/6
 shutdown
 port link-type access
 port default vlan 30
#
interface GigabitEthernet0/0/7
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/8
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/8
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/8
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
 auto speed 100
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/13
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/13
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/14
 auto speed 100
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/14
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/14
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/15
 shutdown
 port default vlan 30
#
interface GigabitEthernet0/0/16
 shutdown
 port default vlan 30
#
interface GigabitEthernet0/0/17
 port link-type access
 port default vlan 30
#
interface GigabitEthernet0/0/18
 shutdown
 port link-type access
 port default vlan 30
#
interface GigabitEthernet0/0/19
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/19
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/19
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/20
 auto speed 100
 port link-type access
 port default vlan 28
 traffic-filter inbound acl 3977
 traffic-filter outbound acl 3976
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/20
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/20
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/21
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/21
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/21
 qos lr outbound cir 100000 cbs 65535
 qos lr inbound cir 100000 cbs 65535
#
interface GigabitEthernet0/0/22
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/22
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/22
 qos lr outbound cir 100000 cbs 65535
 qos lr inbound cir 100000 cbs 65535
#
interface GigabitEthernet0/0/23
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/23
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/23
 qos lr outbound cir 100000 cbs 65535
 qos lr inbound cir 100000 cbs 65535
#
interface GigabitEthernet0/0/24
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/24
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/24
 qos lr outbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/25
#
interface GigabitEthernet0/0/26
#
interface GigabitEthernet0/0/27
#
interface GigabitEthernet0/0/28
#
interface GigabitEthernet0/0/29
#
interface GigabitEthernet0/0/30
#
interface GigabitEthernet0/0/31
#
interface GigabitEthernet0/0/32
#
interface GigabitEthernet0/0/33
#
interface GigabitEthernet0/0/34
#
interface GigabitEthernet0/0/35
#
interface GigabitEthernet0/0/36
#
interface GigabitEthernet0/0/37
#
interface GigabitEthernet0/0/38
#
interface GigabitEthernet0/0/39
#
interface GigabitEthernet0/0/40
#
interface GigabitEthernet0/0/41
#
interface GigabitEthernet0/0/42
#
interface GigabitEthernet0/0/43
#
interface GigabitEthernet0/0/44
#
interface GigabitEthernet0/0/45
#
interface GigabitEthernet0/0/46
#
interface GigabitEthernet0/0/47
#
interface GigabitEthernet0/0/48
#
interface XGigabitEthernet0/0/1
#
interface XGigabitEthernet0/0/2
#
interface XGigabitEthernet0/0/3
 description TKY1-03A-X16-BAS-N3064-B-E1/7
 eth-trunk 15
#
interface XGigabitEthernet0/0/4
 description TKY1-03A-X16-BAS-N3064-B-E1/8
 eth-trunk 15
#
interface NULL0
#
undo icmp name timestamp-request receive
#
ip route-static 0.0.0.0 0.0.0.0 10.0.19.254
#
snmp-agent
snmp-agent local-engineid 800007DB037CD9A053C2D1
snmp-agent community read cipher %^%#Z@FP)4$fJ;NsEkWmW-x/_3^U=*k/CQQw!|3i6&F"KZd7839MgFYty*DK+2qM+CDbTA=W;HE.CG'3W!d!%^%# acl acl4snmp
snmp-agent sys-info location JP
snmp-agent sys-info version v2c v3
#
stelnet server enable
ssh server cipher aes256_ctr aes128_ctr
ssh server hmac sha2_256
ssh client cipher aes256_ctr aes128_ctr
ssh client hmac sha2_256
ssh server dh-exchange min-len 2048
#
user-interface con 0
 authentication-mode password
 set authentication password cipher $1a$!EezTDAnY7$.H{9R*nl:M{mTjUAew`'JoDH6GX}T4]TyA9`<$%0$
user-interface vty 0 4
 acl acl4snmp inbound
 authentication-mode aaa
 protocol inbound all
user-interface vty 16 20
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
ops
#
return